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MEMORANDUM FOR THE ME 



ims^Msiau^go 



Subjects Leas urea for Increased Security of Communication 

Intelligence (COMINT).. 



lo I have had the attached study prepared in AFSA, and present 
it for your consideration, with a vlov; to discussing the problem at 
the nest meeting of USC2B, 

2 0 The Coordinator, for reasons set forth in the attached report, 
is becoming increasingly concerned over what appears to be a gradual 
weakening of the security of CCKDJTp 




EARL E, STOKE 
Rear Admiral, U.S. Navy 
Director, Armed Forces Security Agency 
USCIB Coordinator 
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REPORT Eg THE USCIB OOORDEIATOR 
to the 

UNITED STATES CCLSMUNICATIOHS INTELLIGENCE BOARD (USCIB) 

on 




lo To determine what additional measures should be tiken to protect present 
and future COMINT sources,, 

FACTS BEARING ON THE PROBLEM AND DISCUSSION 
2 0 See Enclosure herewith* 

CONCLUSIONS 

3o It is concluded thati 

a e A review of all. phases of CCXIHIT security is warranted by the present 
need for increased protection of all COMINT sources and by the evident 
increases in hazards to COLUNT security* 

& It is essential to determine whether any additional measures should 
be established to prevent a repetition of recent losses^ which may well 
have been due to leakSo 

Co It may be advisable, for the protection of high-level COIOUT sour cos, 
to institute particularly stringent security safeguards such as those in 
force in connection with certain high-level CQLUNT problems in World V7ar IIo 

RECQLmmTIONS 

ho It is recommended that the United States Communications Intelligence 
. Boards 

a e Approve the above conclusions* 

b 0 Direct the USCIB Security Com'nittee to make the review referred to 
in paragraph and to include in their report specific re commendations 
pertinent to paragraphs 3b 0 and 3c 00 

Co Direct the USCIB Security Committee to submit its report to 

/ 

USCIB not later than 1 February 1951 c 




ENCLOSURE 







FACTS HEARING ON THE PROBLEM AND DISCUSSION 

lo Since the end of World War II there has been a considerable improvement 
in the security of crypto systems employed by foreign governments, and a rather 
general tightening of eozsKunication security practices, making the production 
of COMINT increasingly difficult* 

2 o Concurrently, there has been a demand for more COMINT and for wider 
dissemination of ito The need for the protection of COMINT sources is there® 
fore increasingly important* This need must be considered not only from the 
standpoint of current sources, but in the light of COMINT potentialities as 
wello 

3o The essential features of effective security control of GQMIUT have 
been established gradually during years of effort, and the security foundation 
is considered to be sound* There is adequate appreciation of the value of 
COMINT, and of the need for protecting its sources* There is, however, no 
ground for complacency concerning the current state of security effectiveness. 
in practice 9 USCIB has played an important role in development of current 
CCMINT security policies and doctrines, and can be expected to play an equally 
important one in the perfecting of their implementation and observance* 

4? We now have the following mechanisms for protection; 
ap.An interdepartmental authority (USCIB)*, 
b Q A Federal protective law (Public Law No* 513) o 
Go Improved investigative machinery* 

d„ Common security standards among U.S* agencies concerned with CQLUNT* 

©o Security agreements with authorized foreign c ollsborators 0 
J** A single U,S 0 producer of high-level C0L2NT (AFSA)« 

Some of these mechanisms are not yet complete* For example, the existence of 
Public Law No* 513 should be made known to publishers, reporters, etc*; and 
there should be a speed-up in investigative procedures to permit more rapid 
clearance of porsonnel, with no sacrifice of thoroughness* 
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Although important and basic steps have been taken since the war to 
establish security on a firm foundation, certain developments have, to a 
considerable extent, nullified the effects of our advances by introducing 
additional hazards. Despite the existing mechanisms for control, it is be- 
lieved that present security is not adequate to insure against fatal leakage 
of information of our success in the solution of high-level problems. The 
basis of the Cocrdinator*s continued apprehension on this score is strengthened 
by certain new factors in the field of COIdHJT. Among them are the following: 
a Q There has bean a steady and substantial increase of both workers and 
consumers o The list of indoctrinated consumers alone has risen from 594 in 
February 1947 to 1,332 in June 1930. In addition, innumerable individuals 



have been brought into the fringe of knowledge for 
and other reasons© 



Lstrative, budgetary. 



b 0 Certain dissemination safeguards have gradually been relaxed 0 Material 
is now distributed to and maintained in a number of areas in Washington, out- 
side the producing agencies, where it was never permitted before,, Moreover, 
distribution to personnel of additional agencies, e©g©, AEG, EC A, NSRB, RIB, 
and probably others, has been authorized© In addition, restrictions on the 
distribution of COUNT material to, and its retention in, overseas occupied 
areas have been eased© 

Co The administrative, control, and budgetary machine ry and procedures are 
such that large numbers of individuals must now be apprised of numerous de~ 
tails of COMMF activities © (The multiplicity of agenci.es, offices, boards, 
and committees concerned with the operation and adndnie .ration of CQLUNT 
activities necessitates distribution beyond COtUHT agonies of innumerable reports# 
justifications, etc©, which, in the aggregate, are hazardous to security©) 

do The dissemination of results is far too voluminous for safety© (It is 
estimated that about 730,000 copies of COtelUT translations, representing sam 
16,000 individual decrypted messages, were distributed ;Ln September, 1930, to 
consumer agencies©) 
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There Is no cver=all authority to insure observance of C CLINT security 
regulations within the COEHHT consumer agencies and organizations* 

Possibly too much individual authority and discretion in the application 
of the common principles are left to individual consumer and producer 
agencies* (The security control of atomic energy information is an example 
of more centralized and riff id control I 

fo Hot only has there bo an a significant increase in the number of persons 
who have been brought into the COiflQJT sphere since the end of hostilities in 
1945# but also there has been an increase in the rate of replacement and 
turnover o In time of war, because of rotation of personnel to overseas units, 
this turnover rate may bs expected to become greater c 

j$t> Since the end of ’.lostilities in 1945, and especially since the recent 
outbreak of new overt hostilities, the presence of indoctrinated per a camel 
(particularly ground, and air personnel) in combat areas has increased the 
danger of ccmpromis 3 of C0I2NT information through capture* 

ho The probability of imminent military and political collaboration with 
allied nations <7 cher than the British (IJATO) will pose additional and 
more difficult problems in the field of COMINT security, especially if 
collaboration should include dissemination and usage of COMINT material* 

6 0 It is obvious that under these conditions the laws of probability are 
bound to operate against the continued security of CGMINTo The chances of 
inadvertent 1 jakage of information, even, aside from all considerations of 
loyalty, inci.*ease as the area of dissemination of COMINT increases, since these 
chances increase in direct proportion to the number of persons who know the 
secrets, and the chances of inadvertent loss of documents increase in direct 
proportion to the number of documents disseminated* Hi precisely the same way, 
the chances ^f a foreign enemy agent* s success in covert operations to" acquire 
C0M2JT information increase as the number of his targets increases* Hi the 
COUNT field, the loss of a single document, sometimes regardless of its specific 
contents, vay have disastrou s consequences* 
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7 • During VJorld '.Var II certain special security safeguards were established 
in particular segments of the high-level German COHHJT problem* Actual experi- 
ence with those safeguards amply demonstrated their feasibility and the practi- 
cability of operating successfully with an extremely United number of operating 
personnel who had a real '‘need-to-kncw' 1 , and with the absolute minimum of dis- 
semination. That experience proved the practicability of maintaining the utmost 
security of high-level material under difficult circumstances without any detri- 
ment to militaiy operational effectiveness* 

8« It is possible to safeguard C01HHT by employing special disguises which 
vrill not handicap its usefulness and which at the same time will serve to hide 
the exact source from which it comes* Exploitation of this possibility^ to- 
gether with more rigid limitations on dissemination, may be necessary to insure 
against the drying up of the sources of this vital information. 

9* Dr the consideration of what additional steps should be taken, it is con- 
venient to divide the whole problem of COIUNT security into four principal 
segments: 

a. security precautions applicable to all steps in the production of 
information* 

b. Format of final products (in its relation to revelation of source). 

c. Accounting control of production of copies, and of their dissemination 
to consumers* 

d. Security precautions applicable to the operational use of COMEfFo 
(Including maximum extent to which COMNT can be safely downgraded for 
tactical use by cover echelons) 

Under its charter USCIB prescribes basic security standards and dissemination 
policies and therefore has cognizance over all of these aspects* 

10* The USCIB Coordinator (in his capacity as Director, AFSA) has full 
operational jurisdiction over the first of these (paragraph 9£»)» and has 
instituted within AFSA as rigid security controls in the production of COI&NT 
information as practicable* Compart mentation has been especially rigid in 
the processing of the principal high-level crypto-systems, and it is doubtful 
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that further steps could be taken in that direction without detriment to 
effectiveness,, The USCIB Coordinator has no jurisdiction, however, over the 
other three segments of the problem and believes that it is to b 0 and c„ 
that USCIB should direct its attention,, The USCIB Security Committee should 
be directed to study these segments of the problem and to submit appropriate 
recommendations,. The fourth aspect (paragraph 9do) is primarily a matter 
under the immediate cognizance of each of the six COMINT consumer agencies 0 
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